obsidian-tc v1.2.1

What's Changed

• ci(release): atomic npm publish via pending dist-tag promotion (THE-224) by @suavecito585 in #19
• fix: audit remediation — 22 fixes across dispatch, ACL, tools, and storage by @suavecito585 in #22
• fix: 5 follow-ups from the Antigravity independent review by @suavecito585 in #24
• ci(security): least-privilege workflow permissions (CodeQL) by @suavecito585 in #23
• fix(frontmatter): preserve untouched keys byte-for-byte on write by @suavecito585 in #26
• fix: remediate granular-audit HIGH/MEDIUM/LOW findings by @suavecito585 in #27
• fix(audit): complete tokenizer parity + rust-toolchain SHA-pin (#6/#11 follow-up) by @suavecito585 in #28
• chore(deps): currency sweep — Zod 4, Biome 2, napi-rs 3, better-sqlite3 12, @types/node 24 by @suavecito585 in #29
• docs: reconcile to current reality (v1.0.2, Node 24, V2 removed) by @suavecito585 in #30
• feat(server): tool-visibility scoping (THE-219) by @suavecito585 in #31
• feat(dist): distribution artifacts — MCP registry, MCPB bundle, editor deeplinks (THE-220) by @suavecito585 in #32
• feat(server): headless VaultBackend — lean v1 (THE-255) by @suavecito585 in #33
• docs(readme): fix Quick start to the real CLI invocation by @suavecito585 in #34
• feat(server): per-caller tool-visibility filtering (THE-250) by @suavecito585 in #36
• chore(release): sync version metadata to 1.2.1 (THE-256) by @suavecito585 in #37
• fix(release): migrate publish.yml napi CLI to @napi-rs/cli v3 by @suavecito585 in #39

Full Changelog: v1.0.2...v1.2.1